[33491] in Kerberos
Re: Kadmin compatibility
daemon@ATHENA.MIT.EDU (Tom Yu)
Fri Jun 17 17:33:29 2011
To: derek@umiacs.umd.edu
From: Tom Yu <tlyu@mit.edu>
Date: Fri, 17 Jun 2011 17:33:21 -0400
In-Reply-To: <4DFBBFED.9050409@umiacs.umd.edu> (Derek Yarnell's message of
"Fri, 17 Jun 2011 16:58:21 -0400")
Message-ID: <ldvips487oe.fsf@cathode-dark-space.mit.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Derek Yarnell <derek@umiacs.umd.edu> writes:
> So currently we have a RHEL4 krb5-server-1.3.4-62.el4_8.2 kadmind
> running. The new RHEL6 krb5-workstation-1.9-9.el6 kadmin client can not
> connect to the kadmind server,
> kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
> error strings are:
> kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
> error strings are:
> kadmind[5009](Notice): Incorrect channel bindings were supplied
> kadmind[5009](Notice): Incorrect channel bindings were supplied
> kadmind[5009](Notice): No error
> kadmind[5009](Notice): No error
> kadmind[5009](Notice): GSS-API error strings complete.
> kadmind[5009](Notice): GSS-API error strings complete.
This is probably a known bug that is a side effect of some IPv6
changes to the RPC library in the krb5-1.9 release. It should be
fixed in the upcoming krb5-1.9.2 release.
http://krbdev.mit.edu/rt/Ticket/Display.html?id=6920
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
